no, more like someone's instance gets pwn-ed and is now part of a botnet and DO is getting calls and or isp-blocked and has to devote staff time to the incident.

in my experience, it's more about trying to keep your IP space clean for the rest of your customers and bandwidth. You either get your IP space blacklisted or some idiot starts burning 1Gbps on ssh attempts and you start getting abuse email from the .mil space which is awkward. Plus, you gotta pay for the bandwidth.

That 5/mo customer is much more likely to disappear than pay for the data they used.

> That 5/mo customer is much more likely to disappear than pay for the data they used.

Is there no such thing as prepaid, "the VM stops when your credits run out" VPS hosting? Seems to work well-enough for Twilio.